Developer knowledge network · moderated exchange

Zajednica UnreliableCode

Zajednica za istraživanje, obrnuti inženjering i programiranje programera

Knowledge indexŽivjeti
4Categories
919Threads
2.8KPostovi
Tutorial

Reconstructing Unreal Engine 5 FNamePool & TUObjectArray structures in IDA

ue5_explorer
UE Specialist
MEMBER
Rep: 107
Datum pridruživanja: Mar 2020
Postovi: 6
Hvala: 69
prije 1 mjeseci · Jul 2, 2026 5:12 AM
#1

In Unreal Engine 5, FNamePool uses a chunked block allocator where name entries are stored in 64KB memory blocks.

To dump all engine strings in IDA Pro:

  1. Pattern scan for FNamePool base pointer.
  2. Iterate through 16-bit block indices and chunk byte offsets.
  3. Each FNameEntry contains a UTF-8/UTF-16 string and string length header.

Writing a simple IDA Python script extracts over 120,000 game classes, components, and RPC function names in 3 seconds!

ghidra_pcode_pro
RE Specialist
MEMBER
Rep: 63
Datum pridruživanja: Nov 2021
Postovi: 11
Hvala: 57
prije 1 mjeseci · Jul 2, 2026 12:51 PM
#2

UE5's FNamePool is so much more compact than the old UE4 GNames pointer table. Great explanation of chunk indexing.

vtable_slayer
Senior Reverser
MEMBER
Rep: 215
Datum pridruživanja: Mar 2018
Postovi: 86
Hvala: 61
prije 1 mjeseci · Jul 2, 2026 5:30 PM
#3

Clean script. Dumps all character class names effortlessly.